Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/lwFhyNroYMkQgFt_MTCY-0ovIkY.roa
File: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (raw, json)
Hash identifier: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=
Subject key identifier: 97:01:61:C8:DA:E8:60:C9:10:80:5B:7F:31:30:98:FB:4A:2F:22:46
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F8E652C34B47E187209536949220B
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/lwFhyNroYMkQgFt_MTCY-0ovIkY.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57912
IP address blocks: 82.119.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8e:65:2c:34:b4:7e:18:72:09:53:69:49:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=970161c8dae860c910805b7f313098fb4a2f2246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:32:c1:a8:c3:07:2b:49:4d:1a:1c:b0:d0:
91:11:3c:5f:ea:63:6d:ed:da:0b:82:4e:bc:96:39:
97:83:cb:5a:02:f3:0e:ed:27:e6:b5:da:9e:98:2f:
9b:41:19:90:67:ed:ae:70:21:8d:2e:72:ba:f3:3b:
fd:2d:7b:26:71:9c:cc:41:54:95:64:be:ca:86:bc:
16:44:dc:63:e9:03:21:90:0e:34:88:fb:1d:22:91:
5f:27:36:20:41:53:e7:51:86:56:de:52:10:0e:0c:
e7:21:a0:e5:a4:5f:e8:6b:66:0e:4e:b9:cb:9c:b4:
cd:db:6d:cb:0a:1d:25:a8:f1:0b:ec:c9:d9:87:a4:
1b:5d:a9:40:93:16:3e:60:e6:42:0c:99:92:46:47:
d1:8a:d5:4e:70:7e:e3:03:27:59:a3:9d:ce:3c:60:
30:19:9f:4e:60:40:8f:b2:fe:e8:2e:99:ad:f9:a6:
67:d9:9e:8c:e0:5a:c9:0d:cb:f3:7e:1d:1e:12:2a:
07:bd:84:a5:91:24:74:5b:05:f8:e8:07:78:50:a4:
5d:9c:b1:2b:86:50:d9:ce:d6:29:f0:88:ae:fe:a9:
05:39:89:b9:0d:20:1c:04:f2:e0:90:20:4a:03:ad:
59:ab:10:67:ac:68:3c:51:bd:41:1a:6e:01:db:a5:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:61:C8:DA:E8:60:C9:10:80:5B:7F:31:30:98:FB:4A:2F:22:46
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/lwFhyNroYMkQgFt_MTCY-0ovIkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:19:cf:85:06:fc:ff:4b:07:7e:42:d6:90:4f:51:2e:56:12:
d5:49:07:13:c4:e2:98:ec:ca:1c:09:50:a4:67:7a:7a:70:e3:
28:ef:92:dd:7b:e3:c9:e2:ae:5a:93:ba:67:94:b2:ae:4d:e8:
29:66:39:3d:c8:21:d2:a5:dd:d6:3b:2b:6c:7d:af:44:6f:f9:
31:83:4f:bc:f7:4a:80:eb:70:ce:5f:01:08:5e:b9:b4:77:5d:
c4:bd:8f:df:5a:f8:5f:e5:38:3e:c2:6c:b5:e5:79:5f:85:58:
43:44:e6:70:c6:fc:4a:3a:0f:9f:a2:6d:47:5a:74:62:ca:46:
9a:81:a1:d9:82:6c:e6:1e:67:af:7b:b7:72:82:f9:1c:05:bd:
5f:6b:35:38:86:9b:70:f6:ae:27:0a:c9:3a:af:9e:0b:e3:c8:
ea:29:ff:41:32:86:3a:af:51:f8:f6:1b:8e:c5:d9:f1:44:d0:
5a:b9:40:38:b5:30:a8:dd:67:08:9b:48:ed:96:6c:7b:88:e6:
fd:aa:1b:3b:a8:bf:5b:64:35:e7:cd:2b:1b:87:89:03:c7:63:
67:9d:63:67:31:98:38:14:9c:f0:96:8e:11:ae:bb:d3:e0:06:
50:cc:de:27:50:c4:6f:1b:ff:85:d1:e0:b3:2f:a9:e8:27:4c:
44:44:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:47 2025 by rpki-client